This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft File: s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft (raw, json) Hash identifier: c0YJHS28DRM8znSjuzVd2TfFWM4ZbN0JeReQLR9ju+c= Subject key identifier: A3:BE:20:95:D7:1A:FD:DD:AD:A9:89:2A:1A:E1:9F:98:7C:C6:C5:D9 Authority key identifier: B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E Certificate issuer: /CN=b37910da1f3a43f96b58f21905eb58f643d0267e Certificate serial: 019AF163FC03515DD15547309ABB1A98C1B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 02:00:52 +0000 Manifest this update: Sat 06 Dec 2025 02:00:52 +0000 Manifest next update: Sun 07 Dec 2025 02:00:52 +0000 Files and hashes: 1: 1Z0qsk9StCFAQktZcYQaKAQv6Eo.roa (hash: 7ZoC6UA8RmSyn6UoUQLfpDC2951iCi7ws/lgZfO/s3U=) 2: s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl (hash: oqwgv1jPOXnHdK79CV5DjpR/+4nJcZz4uTJV/VkQ/ew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:fc:03:51:5d:d1:55:47:30:9a:bb:1a:98:c1:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37910da1f3a43f96b58f21905eb58f643d0267e Validity Not Before: Dec 6 02:00:52 2025 GMT Not After : Dec 7 02:00:52 2025 GMT Subject: CN=a3be2095d71afdddada9892a1ae19f987cc6c5d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:58:4b:db:fb:20:30:b3:bd:b6:5e:2e:5d:d2: 14:19:a8:c4:3a:d6:2d:8a:5c:d0:93:0d:14:f1:6f: 58:d2:72:44:25:8b:02:13:a2:8f:87:29:a9:c2:74: 1d:66:7b:fa:02:c4:17:af:72:28:e3:d8:83:14:cd: 6c:8c:cc:75:a6:f3:c1:59:99:ab:cf:d0:77:33:d4: 52:01:fb:e0:64:7c:87:26:d4:61:c0:f3:c9:bb:de: 5f:db:5d:f4:de:8a:9c:db:fa:f4:f3:bf:38:b9:58: d4:59:2a:12:c5:9f:d6:ff:79:70:d5:c9:fb:68:11: 64:16:88:26:37:73:63:2b:8e:68:15:b7:96:e0:79: b1:c7:0b:51:1b:35:2c:ff:a7:ae:90:c5:02:c7:30: a8:9f:24:a3:a1:a1:20:6d:4b:39:cd:13:75:5f:5d: 02:9d:dd:d3:7f:49:dd:04:c8:2c:72:cd:c8:2e:55: b2:9e:2e:b7:c5:07:cb:91:7d:72:39:88:92:ce:82: 94:c0:26:1d:19:32:ea:a2:fa:10:e3:50:2b:96:22: fe:32:e9:ce:b2:0a:17:2d:25:ec:cd:e9:2a:26:c5: b5:36:43:c8:17:f8:ca:1d:35:87:ef:4d:87:b2:1f: ad:4f:b2:45:bd:61:41:a9:5b:98:cc:62:99:a3:8a: 00:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BE:20:95:D7:1A:FD:DD:AD:A9:89:2A:1A:E1:9F:98:7C:C6:C5:D9 X509v3 Authority Key Identifier: keyid:B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:fd:a1:91:08:7b:f1:47:12:c6:f0:23:f1:ac:ed:52:0e:02: de:ac:36:8f:72:71:df:aa:49:a2:0b:f9:5d:ad:a0:20:a5:d9: 25:6b:8a:39:16:b6:31:6e:41:ec:c8:d5:94:57:b9:ec:38:63: b6:06:db:5f:06:48:ca:a8:9d:de:2f:89:1c:3b:d5:9c:9a:76: 5d:b5:51:72:77:f0:38:5f:cc:2c:88:89:e0:82:d4:65:3b:84: ac:91:47:6f:7c:ec:53:44:27:b4:c7:cb:62:42:6f:e6:52:e5: 4a:f6:12:2f:d6:bd:1d:f8:9f:49:d1:6b:05:fe:57:53:c2:08: 5e:38:19:fc:84:a7:f5:15:00:42:aa:df:b7:76:15:50:39:24: 55:db:f1:8a:af:88:9c:65:26:3b:79:2f:8e:bd:af:bb:a1:c0: 0b:31:a5:4b:87:b2:e7:31:d0:3a:e2:b3:04:ad:76:0f:b3:fd: a5:43:4c:99:54:8c:30:d6:e0:40:c5:51:f6:92:1d:5a:75:8f: 31:b5:62:a2:61:f8:e3:9a:71:1b:b5:99:24:b4:86:f6:e5:50: fe:f0:85:9d:13:31:1e:ea:68:7d:2d:f4:51:55:c7:b7:93:cb: 25:7d:b0:f8:ac:9f:d6:cd:cd:de:fc:9a:58:ee:55:c0:2c:ba: 7b:dc:65:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/wDUV3RVUcwmrsamMG0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzNzkxMGRhMWYzYTQzZjk2YjU4ZjIxOTA1ZWI1OGY2NDNk MDI2N2UwHhcNMjUxMjA2MDIwMDUyWhcNMjUxMjA3MDIwMDUyWjAzMTEwLwYDVQQD EyhhM2JlMjA5NWQ3MWFmZGRkYWRhOTg5MmExYWUxOWY5ODdjYzZjNWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFhL2/sgMLO9tl4uXdIUGajEOtYt ilzQkw0U8W9Y0nJEJYsCE6KPhympwnQdZnv6AsQXr3Io49iDFM1sjMx1pvPBWZmr z9B3M9RSAfvgZHyHJtRhwPPJu95f21303oqc2/r08784uVjUWSoSxZ/W/3lw1cn7 aBFkFogmN3NjK45oFbeW4HmxxwtRGzUs/6eukMUCxzConySjoaEgbUs5zRN1X10C nd3Tf0ndBMgscs3ILlWyni63xQfLkX1yOYiSzoKUwCYdGTLqovoQ41ArliL+MunO sgoXLSXszekqJsW1NkPIF/jKHTWH702Hsh+tT7JFvWFBqVuYzGKZo4oA7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKO+IJXXGv3dramJKhrhn5h8xsXZMB8GA1UdIwQY MBaAFLN5ENofOkP5a1jyGQXrWPZD0CZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczNrUTJoODZRX2xyV1BJWkJldFk5a1BRSm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81ZmM4MGUtYTA5NS00YzIwLTkwZTQt MmMwZjk4YTc0OTY2LzEvczNrUTJoODZRX2xyV1BJWkJldFk5a1BRSm40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi81ZmM4MGUtYTA5NS00YzIwLTkwZTQtMmMwZjk4YTc0OTY2 LzEvczNrUTJoODZRX2xyV1BJWkJldFk5a1BRSm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGv2hkQh7 8UcSxvAj8aztUg4C3qw2j3Jx36pJogv5Xa2gIKXZJWuKORa2MW5B7MjVlFe57Dhj tgbbXwZIyqid3i+JHDvVnJp2XbVRcnfwOF/MLIiJ4ILUZTuErJFHb3zsU0QntMfL YkJv5lLlSvYSL9a9HfifSdFrBf5XU8IIXjgZ/ISn9RUAQqrft3YVUDkkVdvxiq+I nGUmO3kvjr2vu6HACzGlS4ey5zHQOuKzBK12D7P9pUNMmVSMMNbgQMVR9pIdWnWP MbViomH445pxG7WZJLSG9uVQ/vCFnRMxHupofS30UVXHt5PLJX2w+Kyf1s3N3vya WO5VwCy6e9xl1g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:43:50 2025 by rpki-client